Log in and get started
This topic shows you how to log in to Splunk Web, access the Splunk App for Unix and Linux, and get started.
Log in to Splunk Web
To log into Splunk Web and access the Splunk App for Unix and Linux, navigate to:
Use the host and port you chose during installation of Splunk. The default port is 8000.
The first time you log in to Splunk, the default login details are:
Username - admin
Password - changeme
Splunk recommends that you change the admin password to a secure password.
Access the Splunk App for Unix and Linux
Once you've logged in to Splunk Web, the version of Splunk that is running determines exactly what you see.
In Splunk 5 and earlier, you see Splunk Home, with "Welcome" and "Home" tabs. Click on the "Home" tab to see the list of apps that are currently installed. You should see the Search and Getting Started apps, as well as the Splunk App for Unix and Linux. To access the Splunk App for Unix and Linux, click on it in the list.
In Splunk 6 and later, the Home page also displays by default, but installed apps appear in the screen; there is no need to access a menu to see them. Click on "Splunk App for Unix and Linux" in the list. You can also access the Splunk Add-on for Unix and Linux in this way, but the add-on only has a configuration page.
Important: When starting the app for the first time, you will initially be presented with a dialog box requesting that you configure the app. Read "First-time configuration" to learn about how to enable the app's inputs.
To learn about the various dashboards available, review "Dashboard reference."
Enable data and scripted inputs
Configure the Splunk App for Unix and Linux
This documentation applies to the following versions of Splunk® App for Unix and Linux: 5.2.2, 5.2.3, 5.2.4, 5.2.5, 6.0.0, 6.0.1